03/24/2095 07:43 9723852910 



STEVEN SMITH 



PAGE 03/08 



PATENT APPLICATION 
DOCKET NO. PRIT01 -00001 

IN THE CLAIMS 

This listing of claims replaces all prior versions and listings of claims in the application. 
1-41. (Canceled) 

42. (New) Computer-implementable instruction code operable on a user device 
for constructing and transmitting a password to an authentication device that authenticates 
the password and grants the user device access to protected information, said instruction 
code being operable for: 

receiving through an input device from a user, a sequence of predefined characters 
to be utilized to construct the password; 

placing the received characters in at least two data packets, without regard to any 
timing characteristics with which the characters were received; 

retrieving from a memory, a time interval mutually agreed upon by the user device 
and the authentication device; and 

individually transmitting the data packets to the authentication device separated in 
time by the mutually agreed upon time interval. 

43. (New) In a user device, a computer-implemented method of constructing and 
transmitting a password to an authentication device that authenticates the password and 
grants the user device access to protected information, said method comprising: 

receiving through an input device from a user, a sequence of predefined characters 
to be utilized to construct the password; 

placing the received characters in at least two data packets; 

retrieving from a memory, a predefined time interval; and 

individually transmitting the data packets to the authentication device separated in 
time by the predefined time interval. 
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44. (New) The method of claim 43, wherein the password includes at least three 
data packets, and wherein the step of retrieving a predefined time interval includes 
retrieving a first predefined time interval for separating a first pair of adjacent data packets 
and retrieving a different second predefined time interval for separating a second pair of 
adjacent data packets. 

45. (New) The method of claim 43 F further comprising, before the retrieving step, 
the steps of: 

receiving at least one predefined time interval from the authentication device; and 
storing the at least one predefined time interval in the memory. 

46. (New) The method of claim 43, wherein the step of placing the received 
characters in at least two data packets includes placing a plurality of characters in at least 

47. (New) In an authentication device, a computer-implemented method of 
authenticating a user device requesting access to protected information through the 
authentication device, said method comprising: 

receiving at least two individually transmitted data packets from the user device; 

measuring a time of receipt for each received data packet to determine a received 
time interval separating each data packet from an adjacent data packet received from the 
user device; 

determining by the authentication device, whether the received time interval 
separating each data packet from an adjacent data packet matches the predefined time 
interval; 

extracting characters from the received data packets; 

determining by the authentication device, whether the extracted characters match 
the sequence of predefined characters; and 
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positively authenticating the user device only if the received time interval separating 
each data packet from an adjacent data packet matches the predefined time interval, and 
the extracted characters match the sequence of predefined characters. 

48. (New) A method of transmitting a computer password having a plurality of 
characters, comprising: 

placing the plurality of characters in at least two data packets; 

obtaining at least one predefined time interval for defining an individual transmission 
time for transmitting each data packet from a user device to an authentication device; and 

individually transmitting the at least two data packets from the user device to the 
authentication device at the individual transmission times for each data packet; 

wherein a valid password must carry the correct characters in the data packets, and 
the data packets must be received by the authentication device with the correct time 
interval between sequential data packets. 

49. (New) The computer password of claim 48, wherein at least one of the data 
packets carries a plurality of the characters of the user's password. 

50. (New) A computer-implemented method of authenticating a user device 
requesting access to protected information through an authentication device, said method 
comprising: 

in the user device: 

receiving through an input device from a user, a sequence of predefined 
characters to be utilized to construct the password; 

placing the received characters in at least two data packets; 

retrieving from a memory, a predefined time interval; and 

individually transmitting the data packets to the authentication device 
separated in time by the predefined time interval; and 
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in the authentication device: 

receiving the individually transmitted data packets from the user device; 

measuring a time of receipt for each received data packet to determine a 
received time interval separating each data packet from an adjacent data packet in the 
password; 

determining by the authentication device, whether the received time interval 
separating each data packet from an adjacent data packet matches the predefined time 
interval; 

extracting the characters from the received data packets; 

determining by the authentication device, whether the extracted characters 
match the sequence of predefined characters; and 

positively authenticating the user device only if the received time interval 
separating each data packet from an adjacent data packet matches the predefined time 
interval, and the extracted characters match the sequence of predefined characters. 
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